[dns-operations] ip id from servers

[Mark Andrews]

In message <m27hpj1tvx.wl%randy at psg.com>, Randy Bush writes:
> > Across what kind of measurement interval are the duplicates observed?
> > Within milliseconds, seconds ... hours?
> 
> an hour or so.  other sources did not exhibit such behavior.
> 
> > Is this is the ID field in the layer 3 IP header - could these be
> > multiple fragments from the same datagram?
> 
> yes, could be.  but, again, other sources did not exhibit such
> behavior.  so i am wondering about dns or server oddities.
> 
> randy

There is very little fragmented traffic other than from nameservers.

> _______________________________________________
> dns-operations mailing list
> dns-operations at lists.dns-oarc.net
> https://lists.dns-oarc.net/mailman/listinfo/dns-operations
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org